commit 03571e3fa0800e7f37ab1a496890712205963b7c
author Elliott Hughes <enh@google.com> Sat Sep 30 01:20:54 2017 +0000
committer android-build-merger <android-build-merger@google.com> Sat Sep 30 01:20:54 2017 +0000
tree eb1b9d5a2e2386a6604f7cb1390ebbbfd11e534a
parent 6e3b79f09ab5c30a573ed09e6e82fb26230dff31
parent 110b3c3bd85f8629e633c5611905490f87d41828

Merge "run-as: Keep supplementary groups." am: e80beca255 am: ee4d611c46 am: 8740d88c66
am: 94be69982f

Change-Id: I90bd62685c96a8c25e92ca2674a5a73a3bd6d0ce

run-as/run-as.cpp

diff --git a/run-as/run-as.cpp b/run-as/run-as.cpp
index e7b8cc2..b27cfad 100644
--- a/run-as/run-as.cpp
+++ b/run-as/run-as.cpp
@@ -194,6 +194,7 @@
   ScopedMinijail j(minijail_new());
   minijail_change_uid(j.get(), uid);
   minijail_change_gid(j.get(), gid);
+  minijail_keep_supplementary_gids(j.get());
   minijail_enter(j.get());
 
   if (selinux_android_setcontext(uid, 0, info.seinfo, pkgname) < 0) {